DSO Exploit

[Alice]

I have recently installed "Sypbot S&D" and it keeps
finding a spyware called DSO Exploit that effects your
registry. I deleted it once and again it came back. As I
am a novice of registry, I hesitate to keep deleting it---
any advise?

 

[Carey Frisch [MVP]]

Could be it's hiding in System Restore.
Turn off System Restore and run the fixes again.

How to Turn On and Turn Off System Restore in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;310405&Product=winxp

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-----------------------------------------------------------------------------------


|I have recently installed "Sypbot S&D" and it keeps
| finding a spyware called DSO Exploit that effects your
| registry. I deleted it once and again it came back. As I
| am a novice of registry, I hesitate to keep deleting it---
| any advise?

 

[Bruce Chambers]

Greetings --

That particular exploit was patched by an IE Cumulative Update
MS02-015, in March of 2002. If you've installed this specific patch,
or any subsequent IE Cumulative Updates, or Service Pack 1, you're
safe. It would appear that the latest version of Spybot S&D is only
checking for Internet zone settings in the registry that could be used
as work-around protection, and not for the presence of any corrective
patches. Hopefully, the makers of Spybot will soon fix this bug.

MS02-015 March 28, 2002 Cumulative Patch for Internet Explorer
http://support.microsoft.com/default.aspx?scid=kb;EN-US;319182

If you like, you can test your system for this particular
vulnerability at this web site:
http://www.greymagic.com/security/advisories/gm001-ie/


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH

 

[Guest]

thank You.I read the article you pointed out to me and if
I understand it corectly, If I turn off the system restore
(just uncheck the box) ALL my previous restore points will
be removed!! Is there a way to just temp turn off and
save all the old ones in case I want to restore back to an
earlier time if I continue to have problems?

 

[Old Bob]

Thank You.....I have always installed any and all patches
from windows as soon as available..thank you. I went to
spybot site says they are aware of the issue and will
correct on the next update. Have I harmed anything since
I deleted the registry items already once? After the line
that detected the spyware it say (nothing done)-does this
mean there has been no harm done and I should not have
deleted the file?

 

[Jupiter Jones [MVP]]

If you restore the computer with System Restore, you also restore the
exploits.
Turning off System Restore deletes all Restore Points.
There is no way to "temp turn off and save all the old ones".

 

[Bruce Chambers]

Greetings --

If IE is still working properly, you may not have hurt anything.
If you're worried, however, you could use a restore point to return
the registry to it's pre-deletion state.

Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH